Most airdrop hunters know not to click a random link promising free tokens. Fewer expect the scam to arrive inside a Discord server they have been in for months, or as a Telegram message from an account with the project's exact name and logo. Social platforms are now the main hunting ground for airdrop scammers, because trust is already built in: a message in a familiar server feels safe in a way a random website never does.

The classic trick is the fake announcement. A scammer copies a real project's announcement channel, recreates its branding, and posts a claim link with a short deadline. The link leads to a site that looks identical to the real claim page, and connecting your wallet there triggers a malicious signature request. The drain is instant: the moment you sign, your tokens and NFTs can be swept. The urgency is deliberate. A 24-hour claim window stops you from checking the official channels.

Impersonation is the second trick. Scammers create accounts with names one character different from a team member or moderator, then DM users who asked a question in a public channel. The message is helpful and specific: a link to a support form, a claim page, or a validation tool. Real team members almost never DM first, and no legitimate project will ever ask you to validate your wallet by entering a seed phrase or signing an unknown transaction. Any DM that does either is a scam, no matter how official it looks.

Fake support bots are the third pattern. In busy servers, a bot account replies to your question within seconds with a link to a support ticket or a wallet verification page. The speed is the tell: real support takes time, and real projects do not solve wallet problems through links in public chat. If a bot or a stranger replies to your support question with a link, ignore it and open a ticket through the project's official website instead.

Your defences are mostly habits. Turn off DMs from server members in Discord, and set Telegram so only contacts can message you. Never click a claim link from a chat message: type the project's official domain yourself or use a link you already trust. Before signing any transaction, read what it actually does, and if a signature request mentions setApprovalForAll or a token approval with no limit, reject it. Use a separate burner wallet for airdrop claims, so even a successful drain costs you little.

If you have already signed something suspicious, act fast. Revoke token approvals through a reputable approval checker, move funds from the affected wallet to a fresh one, and check whether any NFTs or tokens were moved. Then report the account and the link in the real project's server so other members are warned. Scammers reuse the same infrastructure across many servers, and a single report can shut down a campaign.

The rule that covers all of it is simple: the project will announce a claim on its official website and its official social accounts at the same time. If you only see it in one chat message, from one account, with a deadline measured in hours, it is not real. Slow down, verify through the official domain, and the scam fails.

Contract addresses are the one check that cannot be faked easily. Before interacting with any claim, verify the token contract address on the project's official documentation or its official social accounts, then confirm it on a block explorer. A fake claim site almost always uses a different contract, and comparing the two addresses takes thirty seconds. Bookmark the official docs page for each project you farm, so you always have a trusted source to check against when a new announcement appears.